Email: 90 Autolearn: 0 AvgScore: 4.94 AvgScanTime: 1.98 sec Spam: 29 Autolearn: 0 AvgScore: 16.76 AvgScanTime: 1.81 sec Ham: 61 Autolearn: 0 AvgScore: -0.67 AvgScanTime: 2.05 sec Time Spent Running SA: 0.05 hours Time Spent Processing Spam: 0.01 hours Time Spent Processing Ham: 0.03 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 28 88.89 96.55 85.25 2 XM_B_Unicode 24 71.11 82.76 65.57 3 DKIM_SIGNED 23 71.11 79.31 67.21 4 XMListUnsubscribeExists 21 51.11 72.41 40.98 5 DKIM_VALID 17 57.78 58.62 57.38 6 XM_DK_Pass 17 62.22 58.62 63.93 7 XM_B_Unicode3 16 44.44 55.17 39.34 8 RELAYCOUNTRY_US 16 66.67 55.17 72.13 9 DCC_CHECK 15 30.00 51.72 19.67 10 DCC_CHECK_NEGATIVE 14 70.00 48.28 80.33 11 RELAYCOUNTRY_META 13 21.11 44.83 9.84 12 DKIM_VALID_AU 13 37.78 44.83 34.43 13 FVGT_m_MULTI_ODD 13 36.67 44.83 32.79 14 UNTRUSTED_Relay 12 16.67 41.38 4.92 15 XM_B_SpammyWords 12 42.22 41.38 42.62 16 BAYES_99 11 13.33 37.93 1.64 17 LOC_TINY_FONT_1 11 25.56 37.93 19.67 18 BAYES_999 10 12.22 34.48 1.64 19 BAYES_50 10 43.33 34.48 47.54 20 XM_B_Investor 9 10.00 31.03 0.00 21 T_KAM_HTML_FONT_INVALID 9 25.56 31.03 22.95 22 XM_UB99 8 8.89 27.59 0.00 23 XM_DK_Undo_02 8 16.67 27.59 11.48 24 XM_UB999 8 8.89 27.59 0.00 25 BOTNET_IPINHOSTNAME 7 15.56 24.14 11.48 26 DKIM_VALID_EF 7 26.67 24.14 27.87 27 HTML_IMAGE_RATIO_02 7 7.78 24.14 0.00 28 XMSubLong 7 22.22 24.14 21.31 29 HTML_FONT_LOW_CONTRAST 7 20.00 24.14 18.03 30 XM_B_SpammyWords2 6 11.11 20.69 6.56 31 DKIM_INVALID 6 13.33 20.69 9.84 32 T_REMOTE_IMAGE 6 10.00 20.69 4.92 33 LotsOfNums_01 6 12.22 20.69 8.20 34 TR_XM_InvalidRelay 6 6.67 20.69 0.00 35 RELAYCOUNTRY_ES 6 6.67 20.69 0.00 36 TR_XM_INV_DKIM 6 6.67 20.69 0.00 37 TM2_M_URI_OPT_OUT 5 5.56 17.24 0.00 38 LOTS_OF_MONEY 5 6.67 17.24 1.64 39 TR_XM_DK_Unsub 5 13.33 17.24 11.48 40 HTML_IMAGE_RATIO_06 5 16.67 17.24 16.39 41 XM_Body_Dirty_Words 5 16.67 17.24 16.39 42 MAILING_LIST_MULTI 5 15.56 17.24 14.75 43 XM_UB50 4 6.67 13.79 3.28 44 TM2_M_VERY_LONG_WORD 4 6.67 13.79 3.28 45 TR_LOTS_OF_MONEY3 4 4.44 13.79 0.00 46 TR_XM_DKIM_Undo 4 12.22 13.79 11.48 47 BAYES_60 4 13.33 13.79 13.11 48 SpammyFromTLD_01 4 4.44 13.79 0.00 49 RCVD_IN_BL_SPAMCOP_NET 4 4.44 13.79 0.00 50 XMSubPhish11 4 5.56 13.79 1.64 51 RELAYCOUNTRY_UA 4 4.44 13.79 0.00 52 RELAYCOUNTRY_NG 4 4.44 13.79 0.00 53 TR_MetaPhish_Combo_01b 4 4.44 13.79 0.00 54 TR_XM_SB_Phish 4 5.56 13.79 1.64 55 BOTNET 4 11.11 13.79 9.84 56 UNPARSEABLE_RELAY 4 15.56 13.79 16.39 57 XM_ShortIntro_01 4 5.56 13.79 1.64 58 MONEY_FROM_41 4 4.44 13.79 0.00 59 FSL_BULK_SIG 4 4.44 13.79 0.00 60 URI_PHP_REDIR 3 3.33 10.34 0.00 61 XM_B_Unsub 3 6.67 10.34 4.92 62 TooManyTo_001 3 4.44 10.34 1.64 63 XM_H_Long_From02 3 11.11 10.34 11.48 64 MIME_CHARSET_FARAWAY 3 10.00 10.34 9.84 65 URIBL_DBL_SPAM 3 3.33 10.34 0.00 66 XMNumbers 3 7.78 10.34 6.56 67 TR_XM_BayesUnsub 3 6.67 10.34 4.92 68 TR_DCC_Bayes_99 2 2.22 6.90 0.00 69 RCVD_IN_MSPIKE_H2 2 10.00 6.90 11.48 70 XM_UncommonTLD01 2 6.67 6.90 6.56 71 RELAYCOUNTRY_FR 2 4.44 6.90 3.28 72 T_TM2_M_HEADER_IN_MSG 2 18.89 6.90 24.59 73 RCVD_IN_MSPIKE_WL 2 20.00 6.90 26.23 74 XM_B_SpammyWords4 2 2.22 6.90 0.00 75 TR_XM_SpammyWords5 2 2.22 6.90 0.00 76 TR_XM_DK_Bayes 2 13.33 6.90 16.39 77 BAYES_00 2 16.67 6.90 21.31 78 T_TooManySym_01 2 6.67 6.90 6.56 79 TR_XM_DK_Bayes1 2 10.00 6.90 11.48 80 XM_Multi_Part_URI 2 14.44 6.90 18.03 81 XMStrtUSub 2 4.44 6.90 3.28 82 TR_Mismatch_TLD_02 2 2.22 6.90 0.00 83 XM_B_SpammyWords3 2 2.22 6.90 0.00 84 RDNS_DYNAMIC 1 1.11 3.45 0.00 85 XM_Evil_Numbers_Gen 1 5.56 3.45 6.56 86 BAYES_80 1 2.22 3.45 1.64 87 MIME_HTML_MOSTLY 1 2.22 3.45 1.64 88 CK_HELO_GENERIC 1 3.33 3.45 3.28 89 XMStockSpam_06 1 1.11 3.45 0.00 90 XM_SPF_SoftFail 1 3.33 3.45 3.28 91 OBFU_TEXT_ATTACH 1 1.11 3.45 0.00 92 TooManyTo_002 1 1.11 3.45 0.00 93 BAYES_20 1 2.22 3.45 1.64 94 URIBL_BLACK 1 1.11 3.45 0.00 95 RCVD_IN_MSPIKE_H4 1 3.33 3.45 3.28 96 TooManyTo_004 1 1.11 3.45 0.00 97 RELAYCOUNTRY_AU 1 2.22 3.45 1.64 98 T_XMDrugObfuBody_08 1 1.11 3.45 0.00 99 SUBJ_DOLLARS 1 1.11 3.45 0.00 100 XMSubMetaSx_00 1 2.22 3.45 1.64 101 KHOP_HELO_FCRDNS 1 1.11 3.45 0.00 102 HTML_MIME_NO_HTML_TAG 1 3.33 3.45 3.28 103 TR_XM_SpammyWords4 1 1.11 3.45 0.00 104 FROM_GOV_SPOOF 1 2.22 3.45 1.64 105 PDS_RDNS_DYNAMIC_FP 1 1.11 3.45 0.00 106 TR_XM_SpammyRelay 1 6.67 3.45 8.20 107 TooManyTo_003 1 1.11 3.45 0.00 108 HDRS_MISSP 1 1.11 3.45 0.00 109 TO_NO_BRKTS_DYNIP 1 1.11 3.45 0.00 110 TR_XM_UnparsRelay 1 2.22 3.45 1.64 111 MIME_HTML_ONLY 1 16.67 3.45 22.95 112 RCVD_IN_MSPIKE_H3 1 16.67 3.45 22.95 113 XMkickup 1 1.11 3.45 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 52 88.89 96.55 85.25 2 DCC_CHECK_NEGATIVE 49 70.00 48.28 80.33 3 RELAYCOUNTRY_US 44 66.67 55.17 72.13 4 DKIM_SIGNED 41 71.11 79.31 67.21 5 XM_B_Unicode 40 71.11 82.76 65.57 6 XM_DK_Pass 39 62.22 58.62 63.93 7 DKIM_VALID 35 57.78 58.62 57.38 8 BAYES_50 29 43.33 34.48 47.54 9 XM_B_SpammyWords 26 42.22 41.38 42.62 10 XMListUnsubscribeExists 25 51.11 72.41 40.98 11 XM_B_Unicode3 24 44.44 55.17 39.34 12 DKIM_VALID_AU 21 37.78 44.83 34.43 13 FVGT_m_MULTI_ODD 20 36.67 44.83 32.79 14 DKIM_VALID_EF 17 26.67 24.14 27.87 15 RCVD_IN_MSPIKE_WL 16 20.00 6.90 26.23 16 T_TM2_M_HEADER_IN_MSG 15 18.89 6.90 24.59 17 T_KAM_HTML_FONT_INVALID 14 25.56 31.03 22.95 18 MIME_HTML_ONLY 14 16.67 3.45 22.95 19 RCVD_IN_MSPIKE_H3 14 16.67 3.45 22.95 20 XMSubLong 13 22.22 24.14 21.31 21 BAYES_00 13 16.67 6.90 21.31 22 DCC_CHECK 12 30.00 51.72 19.67 23 LOC_TINY_FONT_1 12 25.56 37.93 19.67 24 ALL_TRUSTED 11 12.22 0.00 18.03 25 HTML_FONT_LOW_CONTRAST 11 20.00 24.14 18.03 26 XM_Multi_Part_URI 11 14.44 6.90 18.03 27 TR_XM_DK_Bayes 10 13.33 6.90 16.39 28 XM_Body_Dirty_Words 10 16.67 17.24 16.39 29 UNPARSEABLE_RELAY 10 15.56 13.79 16.39 30 HTML_IMAGE_RATIO_06 10 16.67 17.24 16.39 31 MAILING_LIST_MULTI 9 15.56 17.24 14.75 32 XM_H_Trusted_IP 8 8.89 0.00 13.11 33 BAYES_60 8 13.33 13.79 13.11 34 HTML_FONT_FACE_BAD 8 8.89 0.00 13.11 35 XM_H_Long_From02 7 11.11 10.34 11.48 36 RCVD_IN_MSPIKE_H2 7 10.00 6.90 11.48 37 XM_DK_Undo_02 7 16.67 27.59 11.48 38 BOTNET_IPINHOSTNAME 7 15.56 24.14 11.48 39 TR_XM_DKIM_Undo 7 12.22 13.79 11.48 40 TR_XM_DK_Bayes1 7 10.00 6.90 11.48 41 TR_XM_DK_Unsub 7 13.33 17.24 11.48 42 DKIM_INVALID 6 13.33 20.69 9.84 43 RELAYCOUNTRY_META 6 21.11 44.83 9.84 44 MIME_CHARSET_FARAWAY 6 10.00 10.34 9.84 45 BOTNET 6 11.11 13.79 9.84 46 BOUNCE_MESSAGE 5 5.56 0.00 8.20 47 LotsOfNums_01 5 12.22 20.69 8.20 48 ANY_BOUNCE_MESSAGE 5 5.56 0.00 8.20 49 TR_XM_SpammyRelay 5 6.67 3.45 8.20 50 MSGID_NOFQDN1 4 4.44 0.00 6.56 51 XM_B_SpammyWords2 4 11.11 20.69 6.56 52 XM_UncommonTLD01 4 6.67 6.90 6.56 53 XM_Evil_Numbers_Gen 4 5.56 3.45 6.56 54 SUBJ_ALL_CAPS 4 4.44 0.00 6.56 55 INVALID_MSGID 4 4.44 0.00 6.56 56 TO_MALFORMED 4 4.44 0.00 6.56 57 TR_BOTNET_NEGATE 4 4.44 0.00 6.56 58 T_TooManySym_02 4 4.44 0.00 6.56 59 XMNumbers 4 7.78 10.34 6.56 60 BAYES_40 4 4.44 0.00 6.56 61 T_TooManySym_01 4 6.67 6.90 6.56 62 TR_XM_COVIDMETA4 3 3.33 0.00 4.92 63 T_REMOTE_IMAGE 3 10.00 20.69 4.92 64 XM_B_REG_HTML 3 3.33 0.00 4.92 65 XM_H_Long_From01 3 3.33 0.00 4.92 66 XM_B_Unsub 3 6.67 10.34 4.92 67 TR_MSPIKEBAYES00 3 3.33 0.00 4.92 68 UNTRUSTED_Relay 3 16.67 41.38 4.92 69 TR_XM_BayesUnsub 3 6.67 10.34 4.92 70 MIME_HTML_ONLY_MULTI 3 3.33 0.00 4.92 71 MPART_ALT_DIFF 3 3.33 0.00 4.92 72 HTML_IMAGE_RATIO_04 3 3.33 0.00 4.92 73 XM_SendGrid 2 2.22 0.00 3.28 74 BAYES_95 2 2.22 0.00 3.28 75 XM_E_Blogspot 2 2.22 0.00 3.28 76 IN_ZIMBRA_NJ_WHITELIST 2 2.22 0.00 3.28 77 RCVD_IN_MSPIKE_H4 2 3.33 3.45 3.28 78 T_TooManySym_03 2 2.22 0.00 3.28 79 RELAYCOUNTRY_CA 2 2.22 0.00 3.28 80 XM_UB50 2 6.67 13.79 3.28 81 XM_DK_Undo_01 2 2.22 0.00 3.28 82 TM2_M_VERY_LONG_WORD 2 6.67 13.79 3.28 83 CK_HELO_GENERIC 2 3.33 3.45 3.28 84 RELAYCOUNTRY_FR 2 4.44 6.90 3.28 85 XM_SPF_SoftFail 2 3.33 3.45 3.28 86 MIME_HEADER_CTYPE_ONLY 2 2.22 0.00 3.28 87 TR_XM_SEO4 2 2.22 0.00 3.28 88 BAYES_05 2 2.22 0.00 3.28 89 XM_B_SEO 2 2.22 0.00 3.28 90 XMStrtUSub 2 4.44 6.90 3.28 91 FVGT_m_MULTI_ODD_EMAIL 2 2.22 0.00 3.28 92 TVD_SPACE_RATIO 2 2.22 0.00 3.28 93 HTML_MIME_NO_HTML_TAG 2 3.33 3.45 3.28 94 HTML_TAG_BALANCE_BODY 1 1.11 0.00 1.64 95 FROM_EXCESS_BASE64 1 1.11 0.00 1.64 96 RELAYCOUNTRY_SE 1 1.11 0.00 1.64 97 BAYES_20 1 2.22 3.45 1.64 98 BAYES_999 1 12.22 34.48 1.64 99 LOTS_OF_MONEY 1 6.67 17.24 1.64 100 XMDateMe_00 1 1.11 0.00 1.64 101 RELAYCOUNTRY_AU 1 2.22 3.45 1.64 102 XM_DKIMWhitelistDomains 1 1.11 0.00 1.64 103 HTML_IMAGE_ONLY_24 1 1.11 0.00 1.64 104 XMMoneyMeta_00 1 1.11 0.00 1.64 105 BAYES_80 1 2.22 3.45 1.64 106 HTML_IMAGE_ONLY_28 1 1.11 0.00 1.64 107 XM_Attn_01 1 1.11 0.00 1.64 108 XM_PDF 1 1.11 0.00 1.64 109 TR_XM_MaxWHORU 1 1.11 0.00 1.64 110 BAYES_99 1 13.33 37.93 1.64 111 TooManyTo_001 1 4.44 10.34 1.64 112 MIME_HTML_MOSTLY 1 2.22 3.45 1.64 113 XMSubMetaI_00 1 1.11 0.00 1.64 114 XMBody_95 1 1.11 0.00 1.64 115 IN_HORDE_ADDRESS_BOOK 1 1.11 0.00 1.64 116 HTML_IMAGE_ONLY_32 1 1.11 0.00 1.64 117 PLING_QUERY 1 1.11 0.00 1.64 118 TR_XM_DK_Bayes2 1 1.11 0.00 1.64 119 XMLngstWrd_00 1 1.11 0.00 1.64 120 NO_DNS_FOR_FROM 1 1.11 0.00 1.64 121 TR_XM_UnparsRelay 1 2.22 3.45 1.64 122 MY_SERVERS_FOUND 1 1.11 0.00 1.64 123 URI_TRY_3LD 1 1.11 0.00 1.64 124 WEIRD_PORT 1 1.11 0.00 1.64 125 URI_NOVOWEL 1 1.11 0.00 1.64 126 XMSubPhish11 1 5.56 13.79 1.64 127 HTML_IMAGE_ONLY_20 1 1.11 0.00 1.64 128 FILL_THIS_FORM 1 1.11 0.00 1.64 129 T_XMDrugObfuBody_14 1 1.11 0.00 1.64 130 XMSubMetaSx_00 1 2.22 3.45 1.64 131 TR_Symld_Words 1 1.11 0.00 1.64 132 TR_XM_DK_SendGrid 1 1.11 0.00 1.64 133 HTML_IMAGE_ONLY_08 1 1.11 0.00 1.64 134 XMNoVowels 1 1.11 0.00 1.64 135 XM_ShortIntro_01 1 5.56 13.79 1.64 136 NUMERIC_HTTP_ADDR 1 1.11 0.00 1.64 137 MIME_QP_LONG_LINE 1 1.11 0.00 1.64 138 FROM_GOV_SPOOF 1 2.22 3.45 1.64 139 T_XMDrugObfuBody_01 1 1.11 0.00 1.64 140 UPGRADE_MAILBOX 1 1.11 0.00 1.64 141 XMSubNoVowel 1 1.11 0.00 1.64 142 TR_XM_SB_Phish 1 5.56 13.79 1.64 ----------------------------------------------------------------------